Knowledge-based authentication relies onsomething the user knows, such as passwords, PINs, or answers to security questions. It is the most common but also the weakest form of authentication due to susceptibility to guessing, phishing, and brute-force attacks. For this reason, it is often combined with other factors in multi- factor authentication (MFA).